Static task
static1
Behavioral task
behavioral1
Sample
68216f145769a4d1131f5745120b579d7ffef7e5a4009c5eedc2068f7e4a6f39.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
68216f145769a4d1131f5745120b579d7ffef7e5a4009c5eedc2068f7e4a6f39.exe
Resource
win10v2004-20220812-en
General
-
Target
68216f145769a4d1131f5745120b579d7ffef7e5a4009c5eedc2068f7e4a6f39
-
Size
1.9MB
-
MD5
5b3b9c02cb960b2b401ded0abf16d9f2
-
SHA1
c748f10a872f861b13cf81feb96b4fb4d56373c6
-
SHA256
68216f145769a4d1131f5745120b579d7ffef7e5a4009c5eedc2068f7e4a6f39
-
SHA512
53f80c17c3edd989191bee4cfbff5a5bb9512c6b3b1da10f77623b57b3c2a3f409987f15489a2f43c5bb22b30beecf0cbea46978f6f6edb3f0da7460c71f9e1f
-
SSDEEP
49152:hSYID8vHLApFML9Ad4+SJ61rYgL99BSmS5QZkHfb69jVqWp1:a8vrqmLO4+06a4vhJZkHfb69jVqK
Malware Config
Signatures
Files
-
68216f145769a4d1131f5745120b579d7ffef7e5a4009c5eedc2068f7e4a6f39.exe windows x86
e0684852489dc700f85b3dbf934928e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
wininet
InternetSetStatusCallbackW
user32
DrawFrameControl
gdi32
GetRgnBox
msimg32
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
ChangeServiceConfigW
shell32
SHGetDesktopFolder
comctl32
_TrackMouseEvent
shlwapi
PathFileExistsW
ole32
DoDragDrop
oleaut32
VarBstrFromDate
setupapi
CM_Get_Parent
winmm
timeEndPeriod
version
GetFileVersionInfoW
dbghelp
MiniDumpWriteDump
netapi32
NetWkstaGetInfo
wintrust
CryptCATAdminAcquireContext
crypt32
CertFindCertificateInStore
oleacc
AccessibleObjectFromWindow
imm32
ImmGetOpenStatus
Sections
.text Size: 1.9MB - Virtual size: 7.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE